Privacy Policy

Last updated: March 2026

What we collect

When you create an account, we collect your email address and a hashed password. If you subscribe to a paid plan, your payment is processed by Stripe — we never see or store your credit card number, only your subscription status.

The loyalty point balances you enter into the optimizer are used in real time to generate recommendations. They are not stored or associated with your account.

How we use it

Your email is used to send account-related notifications (password resets, billing receipts). We do not sell your email address or send marketing email without your consent.

Cookies

Like most websites, we use cookies — small text files stored on your device — to keep you logged in, remember your preferences, and measure how visitors use the site. You can disable cookies in your browser settings, but some parts of the site (account login, saved searches) will not work without them.

Third parties we work with (Google Analytics, Google AdSense) also set cookies. These are described in the sections below. When you first visit Point Strategist we display a cookie notice; continued use of the site indicates consent to the cookies described here.

Analytics

We use Google Analytics to understand aggregate traffic patterns on the site — which pages are visited, how long visitors stay, what device and browser they use. Google Analytics sets cookies and may collect your IP address (anonymized). We do not use Analytics data to identify individual visitors. You can opt out of Google Analytics via the Google Analytics opt-out browser add-on.

Advertising

Point Strategist displays advertisements served by Google AdSense and, from time to time, other third-party advertising networks. These networks use cookies, web beacons, and similar technologies to serve ads that may be based on your prior visits to Point Strategist and other websites. Specifically:

Your rights (GDPR / CCPA)

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you, and to object to or restrict certain processing. California residents have the right to know what personal information we collect and to request deletion under the California Consumer Privacy Act (CCPA). EEA and UK residents have equivalent rights under GDPR.

To exercise any of these rights, email hello@pointstrategist.com. We do not sell personal information to third parties.

Children

Point Strategist is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Third-party services

  • Supabase — authentication and database hosting
  • Stripe — payment processing (governed by Stripe's Privacy Policy)
  • Google AdSense — display advertising (see Advertising section above)
  • Google Analytics — aggregate traffic analytics (see Analytics section above)
  • Vercel — website hosting and content delivery
  • Resend — transactional email delivery

Deleting your account

You can delete your account at any time from the Account page. This permanently removes your email address and subscription data from our records.

Contact

Questions about this policy? hello@pointstrategist.com